Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Duplicate
Priority: Neutral
Fix Version/s: None
Affects Version/s: 6.2.6
Component/s: None
Labels:
None

Template:

Bug template
Acceptance criteria:

Empty

show more show less
Task DoD:

show more show less
Bug DoR:

show more show less

Description

Steps to reproduce

In public instance, disable personalisation filters: date, country, visitor, preview
Enable UTF-8 in both author and public instances
Create a page named pl-żółć
Publish the page
Without login in, request the page: http://localhost:8080/magnoliaPublic/pl-żółć

Expected results

Page is shown

Actual results

An error occurs: HTTP Status 500 - Internal Server Error

java.lang.IllegalArgumentException: An invalid path [/pl-żółć] was specified for this cookie
	org.apache.tomcat.util.http.Rfc6265CookieProcessor.validatePath(Rfc6265CookieProcessor.java:241)
	org.apache.tomcat.util.http.Rfc6265CookieProcessor.generateHeader(Rfc6265CookieProcessor.java:160)
	org.apache.catalina.connector.Response.generateCookieString(Response.java:975)
	org.apache.catalina.connector.Response.addCookie(Response.java:927)
	org.apache.catalina.connector.ResponseFacade.addCookie(ResponseFacade.java:385)
	javax.servlet.http.HttpServletResponseWrapper.addCookie(HttpServletResponseWrapper.java:60)
	info.magnolia.cms.security.CsrfTokenSecurityFilter.unloggedRequestCheckPasses(CsrfTokenSecurityFilter.java:171)
	info.magnolia.cms.security.CsrfTokenSecurityFilter.csrfCheckPasses(CsrfTokenSecurityFilter.java:116)
	info.magnolia.cms.security.CsrfTokenSecurityFilter.doFilter(CsrfTokenSecurityFilter.java:106)
	info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:85)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:79)
	info.magnolia.cms.filters.UnicodeNormalizationFilter.doFilter(UnicodeNormalizationFilter.java:89)
	info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:85)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:79)
	info.magnolia.cms.filters.MultipartRequestFilter.doFilter(MultipartRequestFilter.java:151)
	info.magnolia.cms.filters.OncePerRequestAbstractMgnlFilter.doFilter(OncePerRequestAbstractMgnlFilter.java:59)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:79)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:81)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:81)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:81)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:81)
	info.magnolia.personalization.trait.AbstractTraitDetectorFilter.doFilter(AbstractTraitDetectorFilter.java:80)
	info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:85)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:79)
	info.magnolia.cms.filters.ContentTypeFilter.doFilter(ContentTypeFilter.java:155)
	info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:85)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:79)
	info.magnolia.cms.filters.ContextFilter.doFilter(ContextFilter.java:128)
	info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:85)
	info.magnolia.cms.filters.MgnlFilterChain.doFilter(MgnlFilterChain.java:79)
	info.magnolia.cms.filters.CompositeFilter.doFilter(CompositeFilter.java:65)
	info.magnolia.cms.filters.AbstractMgnlFilter.doFilter(AbstractMgnlFilter.java:85)
	info.magnolia.cms.filters.SafeDestroyMgnlFilterWrapper.doFilter(SafeDestroyMgnlFilterWrapper.java:107)
	info.magnolia.cms.filters.MgnlFilterDispatcher.doDispatch(MgnlFilterDispatcher.java:67)
	info.magnolia.cms.filters.MgnlMainFilter.doFilter(MgnlMainFilter.java:110)
	info.magnolia.cms.filters.MgnlMainFilter.doFilter(MgnlMainFilter.java:96)

Workaround

By enabling personalization filters again, page would be returned correctly.

Development notes

This issue is directly related to changes added in ~~MAGNOLIA-7896~~.

Checklists

Acceptance criteria

Attachments

Issue Links

duplicates

MAGNOLIA-8142 Non ASCII characters in URIs interfere with CsrfTokenSecurityFilter

Closed

is duplicated by

MGNLCE-262 CsrfTokenSecurityFilter does not encode cookie path

Closed

relates to

MAGNOLIA-7896 Generation of CSRF token is too expensive

Closed

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...

(2 mentioned in)

Activity

People

Assignee:: Unassigned

Reporter:: Jonathan Ayala

Votes:: 2 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 08/Feb/21 9:37 AM

Updated:: 19/Aug/21 7:37 PM

Resolved:: 19/Aug/21 7:36 PM

Date of First Response:: 19/Aug/21 7:37 PM

Checklists

Bug DoR

Task DoD